OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [ISSForum] PROVENTIA HA

Scott.Hazelsungard.com
Date: Wed Jul 05 2006 - 09:30:35 CDT


Its my understanding that HA for ISS sensors can either be one hot, one
cold standby or two hot sensors (both seeing the traffic at the same
time). In the Active/Active configuration there is no failover if one
sensor fails. You just have both working simultaneously. Where would
your sensors be in the diagram below? Using a span port on the 6500's or
configured as inline devices between the PIX's and 6500's?

Scott Hazel

"Bill Wharton" <bill_whartonmailhost.cjb.net>
Sent by: issforum-bouncesiss.net
06/27/2006 11:04 AM

To
<issforumiss.net>
cc

Subject
[ISSForum] PROVENTIA HA

Has anybody deployed the ISS sensors in a high-availability configuration
before? I need to set one up and wondering if this topology would work.

 

Internet switch ---- (2) PIX firewalls ---- (2) 6500 switches

 

I have each PIX firewall connecting to a 6500 switch. The PIX firewalls
are
in an active/standby setup with only one firewall passing traffic at all
times.

 

Thank you

 

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforumiss.net

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforumiss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.